Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

libyara-devel-4.5.8-1.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

Name: libyara-devel Distribution: openSUSE Tumbleweed
Version: 4.5.8 Vendor: openSUSE
Release: 1.1 Build date: Tue Oct 6 22:37:40 2026
Group: Development/Libraries/C and C++ Build host: reproducible
Size: 183203 Source RPM: yara-4.5.8-1.1.src.rpm
Packager: https://bugs.opensuse.org
Url: https://virustotal.github.io/yara/
Summary: Development files to support the yara malware identification tool
 
YARA is a tool aimed at helping malware researchers to identify and classify
malware samples. With YARA you can create descriptions of malware families
based on textual or binary patterns contained on samples of those families.
Each description consists of a set of strings and a Boolean expression which
determines its logic.

Provides

Requires

License

BSD-3-Clause

Changelog

* Tue Oct 06 2026 Dirk Müller <dmueller@suse.com>
  - update to 4.5.8:
    * Document the `YR_RE_SCAN_LIMIT` regular expression scan limit
    * BUGFIX: Bound rule table index in `OP_PUSH_RULE` and
      `OP_INIT_RULE` (#2230).
    * BUGFIX: Bound tilde stream row-count read in `dotnet` module
    * BUGFIX: Bound repeat stack depth in `_yr_re_fiber_sync`
    * BUGFIX: Fix memory leak in `yr_rules_load_stream` (e13acd3d).
    * BUGFIX: Add missing `yr_le16toh` byte-swapping in `pe` module
      (a2ff0db0).
    * BUGFIX: Validate summary counts in `yr_rules_from_arena`
    * BUGFIX: Cast `e_lfanew` to `int32_t` before sign check in
      `pe_get_header` (#2228).
    * BUGFIX: Bound export name count against 32-bit overflow in
      `pe_parse_exports` (#2227).
    * BUGFIX: Null-terminate authenticode digest/thumbprint hex
      buffers in `pe` module (#2221).
    * BUGFIX: Fix string memory leak in CLI `args_free` (#2220).
    * BUGFIX: Honor `-w`/`--no-warnings` for the file-too-large
      skip message in CLI (#2219).
    * BUGFIX: Avoid pointer wrap for large index in
      `str_table_entry` (#2217).
    * BUGFIX: Bound iterator item count against value stack depth
      in `yr_execute_code` (#2216).
    * BUGFIX: Byte-swap `sh_entry_count` in ELF symtab/dynsym link
      check (#2214).
    * BUGFIX: Validate relocation target reference buffer ID and
      offset in `yr_arena_load_stream` (#2213).
    * BUGFIX: Fix `INT64_MIN` undefined behavior in grammar
      constant folding (`*`, ``, unary `-`) (#2211).
    * BUGFIX: Fix HWASan trap due to unaligned access in arena
      relocation (#2215).
    * BUGFIX: Bound relocation read by reference size in
      `yr_arena_load_stream` (#2212).
    * BUGFIX: Harden PE delayed import parser and `dotnet` blob
      stream parsing (#2201).
    * BUGFIX: Enable split ID bounds check in `_yr_re_fiber_sync`
      (#2208).
    * BUGFIX: Bound fat architecture count against integer overflow
      in `macho` module (#2209).
    * BUGFIX: Read `dotnet` and `pe` file fields through unaligned
      access helpers (#2210).
    * BUGFIX: Remove double byte-swap of `NumberOfNames` in
      `pe_parse_exports` (#2206).
    * BUGFIX: Check relocation `buffer_id` before dereference in
      `yr_arena_load_stream` (#2202).
    * BUGFIX: Cast character inputs to `unsigned char` before
      `ctype` calls in `pe` and `elf` parsers (#2203).
    * BUGFIX: Avoid unaligned pointer casts in arena operations to
      prevent HWASan traps (#2204).
    * BUGFIX: Bound DEX ID table reads against file size in `dex`
      module (#2205).
    * BUGFIX: Fix build issues with OpenSSL 4.0 (#2233).
    * Contributors: @cblichmann @jmestwa-coder @munzzyy
      @q1930893235 @TristanInSec @wazeer
  - update to 4.5.7:
    * BUGFIX: Guard against undersized rich header in while parsing
      PE files (#2200).
    * BUGFIX: Abort the collection of resources in `pe` module when
      `MAX_RESOURCES` is reached (9d09369).
  - update to 4.5.6:
    * BUGFIX: Out of bounds read while parsing .NET files (#2196).
    * BUGFIX: Make yr_string_set_destroy non-public (#2191).
* Fri Jan 02 2026 Dirk Müller <dmueller@suse.com>
  - update to 4.5.5:
    * Implement the `--no-follow-symlinks` option in Windows
      (6e11b5a).
    * BUGFIX: Revert YR_RE_SCAN_LIMIT back to 4096 (#2177).
    * BUGFIX: infinite loop while parsing corrupt resource
      directory in PE module (#2162).
    * BUGFIX: improved detection whether a string requires all
      matches (#2167).
    * BUGFIX: Heap overflow while loading hand-crafted compiled
      rules (#2178). Thanks to Momoko Shiraishi
    * for the report.
  - update to 4.5.3:
    * BUGFIX: Escape new new and carriage return characters when
      printing file  paths (credits to:  Rajesh Pangare).
    * BUGFIX: Avoid infinite loop while iterating Mach-O regions.
    * BUGFIX: High memory consumption while parsing corrupted PE
      files.
    * BUGFIX: Issue while parsing imports in 32-bits PE files.
    * BUGFIX: Integer overflow while parsing ELF files.
* Fri Mar 21 2025 Andreas Stieger <andreas.stieger@gmx.de>
  - remove unused pcre build dependency
* Sat Dec 28 2024 Andrea Manzini <andrea.manzini@suse.com>
  - update to 4.5.2:
    * Increase the limit for the maximum number of rows in dotnet module (608fb3d).
    * Limit resource names to 1000 character at most (3f5b4c7).
    * Recover from syntax error at the end of an included file (4fc1ff8).
    * BUGFIX: Crash while parsing PE Rich headers with certain files (cbc982d).
    * BUGFIX: Segfault with regular expressions that matched the zero-length string (8616165).
    * BUGFIX: Mitigate stack overflow when scanning very deep directory trees (2a9f61d).
    * BUGFIX: Fix regression introduced in 6209630 (44fd094).
* Tue Aug 27 2024 ming li <mli@suse.com>
  - update to 4.5.1:
    * Allow spaces in regexp repetition operators (e.g: {n, m}).
    * BUGFIX: matches operator was not matching empty strings.
    * BUGFIX: Several bugs in array type handling in dotnet module.
    * BUGFIX: Fix issue while parsing .NET files.
    * BUGFIX: Fix issues while parsing PE resources.
    * BUGFIX: Infinite loop while parsing corrupt PE files.
    * BUGFIX: OOM errors while parsing corrupt PE files.
    * BUGFIX: Build issue in Alpine Linux due to pread64 not found.
    * BUGFIX: Issue while parsing rich header in some PE files.
* Sun Feb 18 2024 Andrea Manzini <andrea.manzini@suse.com>
  - update to 4.5.0:
    * Unreferenced strings are allowed if their identifier start with _ (#1941)
    * New command-line option --disable-console-logs for disabling the output of the console module (#1915)
    * New command-line option --strict-escape that raises warnings on unknown escape sequences (#1880).
    * Improve performance by avoiding the execution of rule conditions that can't match (#1927)
    * Add callback message CALLBACK_MSG_TOO_SLOW_SCANNING for notifying about slow rules (#1921).
    * Expose function RVA in pe.export_details(#1882).
    * BUGFIX: Fix issues in the computation of imphash in pe module (#1944). Credits to the NSHC ThreatRecon team!
    * BUGFIX: Fix multiple out-of-bound memory reads in dex module (#1949, #1951).
    * BUGFIX: Fix memory alignment issues (#1930).
    * BUGFIX: Some strings with the wide and ascii modifiers not matching as they should (#1933).
    * BUGFIX: Some rules not matching when --fast-scan is used (4de3d57)
    * BUGFIX: Properly list memory regions while scanning processes in Mac OS. (#2033)
    * BUGFIX: RFC5652 countersignatures are now correctly parsed in pe module (#2034)
    * BUGFIX: Fix potential DoS due to crashes in authenticode parser with malformed files (#2034). Credits to Bahaa Naamneh!
    * BUGFIX: Fix SIGSEGV in magic module when libmagic returns null pointer (3342aa0)
    * BUGFIX: Prevent infinite recursion while following symlinks (923368e)
* Sat Oct 14 2023 Dirk Müller <dmueller@suse.com>
  - update to 4.4.0:
    * New lnk module (#1732).
    * Unreferenced strings are allowed if their identifier start
      with _ (#1941)
    * New command-line option --disable-console-logs for disabling
      the output of the console module (#1915)
    * New command-line option --strict-escape that raises warnings
      on unknown escape sequences (#1880).
    * Improve performance by avoiding the execution of rule
      conditions that can't match (#1927)
    * Add callback message CALLBACK_MSG_TOO_SLOW_SCANNING for
      notifying about slow rules (#1921).
    * Expose function RVA in pe.export_details(#1882).
    * BUGFIX: Fix issues in the computation of imphash in pe module
    * BUGFIX: Fix multiple out-of-bound memory reads in dex module
    * BUGFIX: Fix memory alignment issues (#1930).
    * BUGFIX: Some strings with the wide and ascii modifiers not
      matching as they should (#1933).
    * BUGFIX: Some rules not matching when --fast-scan is used
* Sun Jul 16 2023 Dirk Müller <dmueller@suse.com>
  - update to 4.3.2:
    * BUGFIX: assertion triggered with certain hex patterns when
      scanning arbitrary files
* Sun Jun 11 2023 Dirk Müller <dmueller@suse.com>
  - update to 4.3.1:
    * BUGFIX: Functions `import_rva` and `import_delayed_rva` are
      now case-insensitive (#1904)
    * BUGFIX: Fix heap-related issue in `dotnet` module on Windows
      (#1902)
    * BUGFIX: Fix heap corruption with certain rules that have very
      long string sets (67cccf0)
* Thu Mar 30 2023 Andrea Manzini <andrea.manzini@suse.com>
  - Build AVX2 enabled hwcaps library for x86_64-v3
* Thu Mar 30 2023 Andrea Manzini <andrea.manzini@suse.com>
  - update to 4.3.0:
    * Added a not operator for bytes in hex strings. Example: {01 ~02 03} (#1676).
    * for statement can iterate over sets of literal strings (e.g. for any s in ("a", "b"): (pe.imphash() == s)) (#1787).
      of statement can be used with at (e.g. any of them at 0) (#1790).
    * Added the --print-xor-key (-X in short form) command-line option that prints the XOR key for xored strings (#1745).
    * Implement the --skip-larger command-line option in Windows (#1678).
    * Add parsing of .NET user types from .NET metadata stream in "dotnet" module (#1605).
    * Improve certificate parsing and validation in "pe" module (#1623).
    * Improve error reporting on certain edge cases (#1709, #1722).
    * BUGFIX: Fix multiple memory alignment issues causing crashes in non-x86 platforms (#1724).
    * BUGFIX: Fix implementation of math.serial_correlation(#1771).
    * BUGFIX: Fix infinite recursion in dotnet module (#1794).
    * BUGFIX: Fix SIGFPE when dividing INT64_MIN by -1 (c2557fc).
    * BUGFIX: Fix several endianess issues (#1884, #1874, #1855).
  - removed fix-test-magic.patch as was merged into upstream
* Mon Feb 06 2023 Hans-Peter Jansen <hpj@urpla.net>
  - backport upstream fixes for file magic tests: fix-test-magic.patch

Files

/usr/include/yara
/usr/include/yara.h
/usr/include/yara/ahocorasick.h
/usr/include/yara/arena.h
/usr/include/yara/atoms.h
/usr/include/yara/base64.h
/usr/include/yara/bitmask.h
/usr/include/yara/compiler.h
/usr/include/yara/error.h
/usr/include/yara/exec.h
/usr/include/yara/exefiles.h
/usr/include/yara/filemap.h
/usr/include/yara/hash.h
/usr/include/yara/integers.h
/usr/include/yara/libyara.h
/usr/include/yara/limits.h
/usr/include/yara/mem.h
/usr/include/yara/modules.h
/usr/include/yara/notebook.h
/usr/include/yara/object.h
/usr/include/yara/parser.h
/usr/include/yara/proc.h
/usr/include/yara/re.h
/usr/include/yara/rules.h
/usr/include/yara/scan.h
/usr/include/yara/scanner.h
/usr/include/yara/simple_str.h
/usr/include/yara/sizedstr.h
/usr/include/yara/stack.h
/usr/include/yara/stopwatch.h
/usr/include/yara/stream.h
/usr/include/yara/strutils.h
/usr/include/yara/threading.h
/usr/include/yara/types.h
/usr/include/yara/unaligned.h
/usr/include/yara/utils.h
/usr/lib64/libyara.so
/usr/lib64/pkgconfig/yara.pc
/usr/share/doc/packages/libyara-devel
/usr/share/doc/packages/libyara-devel/AUTHORS
/usr/share/doc/packages/libyara-devel/CONTRIBUTORS
/usr/share/doc/packages/libyara-devel/README.md
/usr/share/licenses/libyara-devel
/usr/share/licenses/libyara-devel/COPYING

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Nov 12 22:37:20 2026